Merlin Group

What Merlin Group does

Merlin Group, founded in 1994 and headquartered in Tysons Corner, Virginia, is a privately held network of affiliates that invests in, enables, and scales technology companies with disruptive cybersecurity solutions for the U.S. Government and critical infrastructure markets. The company operates through three core affiliates: Merlin Ventures, an early-stage venture capital fund (with a $75M oversubscribed inaugural fund closed in June 2025) that invests in emerging cyber and dual-use technology companies; Constellation GovCloud (CGC), a FedRAMP and StateRAMP compliance acceleration PaaS with an online marketplace of pre-authorized solutions; and Merlin Cyber, a go-to-market execution arm providing public sector sales, sales operations, marketing, technical labs, and government affairs services. Additional capabilities include Merlin Labs (innovation testing and validation) and solution areas spanning post-quantum cryptography readiness, ransomware prevention, AI-driven SOC automation, and Zero Trust roadmap services.

The platform is supported by a CISO community of more than 400 security executives used for peer collaboration and product feedback, and has assembled a senior leadership bench drawing heavily from CISA, the Department of Defense, and major federal contractors. Revenue is generated across four streams: venture management economics (Merlin Ventures), subscription and platform fees plus marketplace commissions (CGC), professional services and partner enablement (Merlin Cyber), and testing/pilot services (Merlin Labs). Pricing is contract-based, primarily multi-year, and targeted at federal, defense, SLED, and critical infrastructure buyers, with no public pricing disclosed.

Merlin Group addresses two linked market failures: (1) federal and critical infrastructure buyers struggle to access cutting-edge cyber innovations because FedRAMP authorization can take 24+ months and exceed $2M; and (2) early-stage cyber companies lack the capital, compliance infrastructure, and public sector distribution to access this regulated market. The affiliate flywheel (capital → compliance → GTM) is engineered to solve both simultaneously, creating a closed-loop ecosystem where portfolio companies feed the marketplace and generate GTM pipeline.

Name

Merlin Group

Legal name

Merlin International

Website

https://themerlingroup.com

Company type

Private

Founded year

1994

Operating status

Operating

Short description

Merlin Group is a network of affiliates — Merlin Ventures, Constellation GovCloud, and Merlin Cyber — that invests in, accelerates compliance for, and drives go-to-market for cybersecurity companies selling into the U.S. federal government and critical infrastructure markets.

Ownership category

akta.pro rank

Product category

Government Cybersecurity Services

NAICS

Management, Scientific, and Technical Consulting Services (5416), Portfolio Management and Investment Advice (523940)

SIC

Services-Management Consulting Services (8742)

akta.pro primary industry

Strategic Partnerships, Alliances & JVs Advisory (BPAHADAI)

Keywords

• Government cybersecurity services
• FedRAMP compliance acceleration
• Public sector go-to-market
• Cybersecurity venture capital
• Zero Trust modernization

Headquarters

HQ city

Tysons Corner

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales, Technology or R&D, Infrastructure

Revenue model

1. Merlin Ventures – Early-Stage Venture Capital: Merlin Ventures is the venture capital fund of Merlin Group, investing in emerging cybersecurity and mission technology companies. It provides capital, domain expertise, government and commercial market access, and hands-on support to help founders accelerate product development and scale. Merlin Ventures raised an oversubscribed $75 million inaugural fund in 2025.
2. CGC Compliance Acceleration Platform: Constellation GovCloud (CGC) is a Platform-as-a-Service (PaaS) built to enable federal security compliance for market readiness. It accelerates FedRAMP/StateRAMP ATO authorization and hosts an online marketplace of FedRAMP-compliant solutions and services. Revenue is derived from compliance services, platform fees, and marketplace commissions from listed vendors.
3. Merlin Cyber – Go-to-Market Services: Merlin Cyber provides public sector go-to-market acceleration services including customized sales, sales operations, marketing, technical/labs, and government affairs capabilities. Revenue is generated through partner enablement fees, sales commissions, and professional services engagements with federal, defense, state, local, and education customers.
4. Merlin Labs – Innovation Lab Services: Merlin Labs provides a secure, hands-on environment for integrating, testing, piloting, and refining cyber technologies against government and enterprise use cases, generating revenue through testing, piloting, and validation services for startups and mature cyber companies.

Pricing tiers

Go-to-market motion1 record

Distribution channels3 records

Marketing channels6 records

Core offering

Merlin Group is a network of affiliates that invests in, enables, and scales cybersecurity technology companies for the U.S. Government and critical infrastructure markets. Its core offerings span venture capital funding for early-stage cyber innovators (Merlin Ventures), a FedRAMP/StateRAMP compliance acceleration platform and online marketplace (Constellation GovCloud), and public-sector go-to-market sales, marketing, technical, and government-affairs services (Merlin Cyber), supplemented by Merlin Labs validation services.

Product overview

Merlin Group is a network of affiliates that invests in, enables, and scales technology companies with disruptive cyber solutions. The ecosystem consists of three main affiliates: Merlin Ventures (early-stage venture capital fund investing in emerging cyber technologies), Constellation GovCloud (CGC) (a compliance acceleration platform-as-a-service that streamlines FedRAMP/StateRAMP authorization and operates a marketplace of compliant solutions), and Merlin Cyber (go-to-market execution engine providing public sector sales acceleration and Zero Trust modernization services). Additional offerings include Merlin Labs for innovation testing and validation, and solution areas covering PQC/post-quantum readiness, ransomware prevention and recovery, AI-driven SOC automation, and Zero Trust roadmap planning.

Differentiator

Problem solved

Functional benefit

Products and services

• Merlin Ventures Early-stage venture capital fund that invests in cybersecurity and mission technology companies, providing capital, domain expertise, and government/commercial market access to help founders accelerate product development and scale.
• Constellation GovCloud (CGC) Platform-as-a-Service (PaaS) built to enable federal security compliance for market readiness, accelerating FedRAMP/StateRAMP ATO authorization and hosting an online marketplace of FedRAMP-compliant solutions and services for government buyers.
• Merlin Cyber
• Merlin Labs (Innovation Lab)

Quantifiable outcome

• Merlin Ventures raised over $75 million in its debut fund in 2025, indicating strong investor confidence in the ecosystem model.
• +2 more outcomes

Named customers5 records

Segments4 records

Ideal customer profiles4 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Partnerships

Three partnerships are on record, tiered core.

• InfoSec Global FederalcoreTechnology or Integration · 6 August 2025InfoSec Global Federal's AgileSec™ Analytics achieved FedRAMP Authorization on the CGC (Constellation GovCloud) platform. This integration enables government customers to access InfoSec Global's post-quantum cryptography (PQC) and cryptographic asset management solutions through CGC's compliance acceleration platform and marketplace.
• Rimini StreetcoreStrategic or Co-development Partner · 30 April 2025Merlin Cyber and Rimini Street announced a strategic partnership to help U.S. Government agencies cut operating costs through DOGE and other initiatives and modernize existing enterprise software and systems. The partnership combines Merlin Cyber's deep expertise in federal enterprise license agreements (ELA), public sector sales enablement, and technology innovation with Rimini Street's cost-effective enterprise software support solutions. Rimini Street leverages Merlin Cyber's strategic government affairs, go-to-market, and technical services to help federal, state, and local agencies maximize ROI on existing enterprise software assets. The two companies completed their first joint transaction bringing immediate and substantial IT cost relief and better enterprise software support to one of the largest cities in America.
• VeeamcoreChannel Partner/ Reseller/ Distributor · 23 August 2024Veeam and Constellation GovCloud (an affiliate of Merlin Group) partnered to bring Veeam's data resilience products to U.S. Public Sector customers with FedRAMP Authorization. Constellation GovCloud enables Veeam to achieve and maintain FedRAMP authorization, expanding Veeam's reach into the government market through a trusted compliance-ready channel partner.

Scale indicators5 records

Recent moves6 records

Expansion highlights5 records

Direct peers

• DataTribe: Cyber-focused startup foundry and venture capital firm that co-builds and invests in cybersecurity companies, often drawing founders from the intelligence community. Closely comparable to Merlin Ventures' cyber-investment thesis and the broader ecosystem model, though DataTribe leans more foundry/incubation and less on compliance and GTM services.
• Carahsoft Technology: Largest government IT distributor and value-added reseller in the U.S. public sector market, providing a channel for cybersecurity and emerging-tech vendors to reach federal, state, and local agencies. Directly comparable to Merlin Cyber's GTM engine and CGC's marketplace model, though Carahsoft is broader in scope and purely channel-based without an investment or compliance arm.
• Ballistic Ventures: Venture capital firm exclusively focused on early-stage cybersecurity companies, founded by veteran security operators. A direct peer to Merlin Ventures within the cyber-venture category, though Ballistic is a pure financial investor without the compliance platform or GTM services layer.

Emerging players

• Govini: Data and analytics platform for the federal market, helping government and industry navigate defense and civilian procurement. Adjacent to Merlin's positioning — both target the federal buyer — but Govini focuses on market intelligence and contract analytics rather than cyber GTM, compliance, and investment.
• Shift5: Cybersecurity and operational technology (OT) analytics company serving U.S. military and critical infrastructure operators, with a heavy focus on DoD and federal transportation. Comparable to Merlin Cyber's critical infrastructure and defense customer set, though Shift5 is a portfolio-style technology company rather than an ecosystem enabler.
• Rebellion Defense: Defense technology company building AI-driven software products for the U.S. military and government. Comparable in its federal cyber and mission-tech focus and the kind of dual-use narrative that Merlin Ventures targets, though Rebellion is a product company rather than an investor/compliance/GTM platform.

Broad incumbents

• Booz Allen Hamilton: Major federal consulting and engineering firm with one of the largest federal cyber practices in the U.S. Overlaps with Merlin Group on government cyber advisory, Zero Trust, and critical infrastructure protection work, but operates as a publicly-traded, multi-billion-dollar incumbent rather than a focused ecosystem.
• Leidos: Large federal systems integrator serving defense, intelligence, and civilian agencies with significant cyber, IT modernization, and FedRAMP-relevant practices. Overlaps with Merlin Group across government cyber and critical infrastructure, but operates at substantially greater scale as a public, multi-billion-dollar contractor.
• ManTech International (now part of CACI): Federal IT and cyber services provider (acquired by CACI in 2022) with deep footprint across DoD, intelligence, and federal civilian cyber missions. Comparable to Merlin Cyber in the federal cyber services space, but a much larger, public-market incumbent with broader agency relationships.
• Accenture Federal Services: Federal arm of Accenture, providing large-scale cyber, IT modernization, and digital transformation services to U.S. government agencies. Comparable to Merlin Cyber in public-sector GTM and Zero Trust modernization services, but a vastly larger, publicly-traded incumbent that competes for the same agency contracts and cyber talent.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat6 records

Key risks6 records

Key highlights6 records

Customer concentration

• LinkedInlinkedin.com/company/themerlingroup

Compliance2 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles12 records

Subsidiaries4 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments1 record

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Merlin Group